Static task
static1
Behavioral task
behavioral1
Sample
08ad61e2cdf63dee915a0072f9d239d0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08ad61e2cdf63dee915a0072f9d239d0.dll
Resource
win10v2004-20231215-en
General
-
Target
08ad61e2cdf63dee915a0072f9d239d0
-
Size
264KB
-
MD5
08ad61e2cdf63dee915a0072f9d239d0
-
SHA1
11f67929b63b6fe8165b7a952f10656f067799a3
-
SHA256
7df2ae6fd9de7e3396dd30df49b1e37b1e32caaa44074df61272483d8ada270b
-
SHA512
0196031b695a76ffa7b70a6f219047ec708fadae3ea939dc8face9feeca0980916fb570418efbc6c26c59ceedf5672345de69191e541c3557c169b28180e1f38
-
SSDEEP
6144:z5o07lBnusGqZIYsdChYiC6WEO/X9+lI3uEZPsw998q9F:zR2NqZIYlhYiC9vki3uEZPsw9G6F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08ad61e2cdf63dee915a0072f9d239d0
Files
-
08ad61e2cdf63dee915a0072f9d239d0.dll windows:4 windows x86 arch:x86
9bae6337a1319a09e417f27aa19ecc76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadAcceleratorsA
CreateIcon
CreateCursor
kernel32
SetCurrentDirectoryA
lstrcpyA
lstrcatA
TlsSetValue
CloseHandle
EnumResourceNamesA
EnumResourceTypesA
FindResourceA
GetDateFormatA
GetLastError
GetPrivateProfileStringA
GetSystemTime
GetSystemTimeAsFileTime
LocalAlloc
MapViewOfFile
OpenFileMappingA
TlsGetValue
Sleep
oleaut32
SysFreeString
VarBstrCat
SafeArrayCreate
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocData
Sections
.text Size: 15KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ